added a config.security key because devise told me so