Add a secret:replace rake task to automatically replace rails' csrf token

See: https://gist.github.com/2057660
Replace doc website URL in README