seed db with factories
move secret token config to environment-specific config files