Load secret_token from ENV

I shouldn't commit the secret_token into git. D'oh!
Upgraded mercury-rails.

Had to upgrade to Rails 3.2 as well. :-/