Remove secret token

You have your secret token publicly visible in config/initializers/secret_token.rb and I've removed it for you. Be sure to rake secret during deploy to generate a new one.