extracted with_secure_token() logic into ApplicationController