generate per-site secret tokens at deploy time

To create unique secret_tokens for each Forge site, the initializer has been changed to read from `config/secret_token.txt`, and a Rake task has been added to generate a cryptographically secure token at first deploy.