upgrade to rails 3.2.13
use env vars for server url and secret token