Secret token is set to env var or generated randomly.
Replaced UA sniffing with proper SVG check.

* Updated quorum layout and specs.
* Update gems.