add figaro gem and set secret_token.rb to use env var