use general token infrastructure based on Rails existing secret token