Update secret_token.rb

Hardcoding the token sets off security scanner alerts, and perpetuates a bad practice of having an actual value for this checked into source control.