Update message_verifier call

- by default, `Rails.application.message_verifier` already uses the Rails secret token.  The argument being passed is an additional salt on top of this.