Use ENV['SECRET_KEY_BASE'] for secret_token