Modify secret token config to use heroku config var in production and
use a simple (unsecure) string in test and development environments.