Use Rails.configuration.secret_token for pepper

Fixes #47