kept secret_key_base private in production
change .js to .coffee and .css to .scss