Handle the Rails secret_token using chef so it's not in GitHub