moved the secret token to an application.yml file using figaro gem, didn't run server to try