Hid secret token

Based off our Brakeman security recommendations, I added config/initializers/secret_token.rb to gitignore and removed it from our repo. You'll need to have a local copy of it still to work correctly.

I created a template token file for others who use our source to use.