Added dotenv-rails gem to secure secret_token.rb, moved mysql pw into .env as well, fixes #11