`secret_token` is now `secret_key_base`