add config.secret_token settings to dummy app to test against rails 3.2
use be matcher for rspec 3.1