Remove secret token

I recall reading [a blog post about this once](http://daniel.fone.net.nz/blog/2013/05/20/a-better-way-to-manage-the-rails-secret-token/). :wink: You'll just need to generate a random token and set it in `ENV['SECRET_TOKEN']` on heroku.