manage secret_token

Fixes #14
Remove token from repository
Use initializer to generate one if not present
Store it in config/secret_token.yml (gitignored)