Rails 4 upgrade
Don't hardcode the secret token