Update rails version to 4.0.2
Use private secet_token in production environment