Update Gemfile.lock for Heroku
Production secret token comes from env variable