Update secret_token.rb

raise awareness about changing secret_key_base. 

better approach can be found here http://blog.phusion.nl/2013/01/04/securing-the-rails-session-secret/