update rails for important security updates
removing secret token. replace with heroku variable