SECRET_TOKEN variable should be required in production
include Guachiman::Permissible by default