replace secret_token with secret_key_base (rails 4 deprecation)