recommend `rake secret` for generating secret_token.rb key