add config.secret_key_base to config/application.rb