rename config.secret_token -> config.secret_key_base