switched to rails 4.1
regenerated gemfile.lock
use spring in development
use unicorn just in production
moved secret_token to rails 4.1's secrets.yml
made auth token cookie signed for security