Use Rails.configuration.secret_token for pepper

Fixes #47
Include Spree::StoreHelper inside auth controllers