Remove Hardcoded Secret_Token

config/initializers/secret_token.rb is used for encrypting session variables between you and the user.
Currently the secret_token is publically available in the repo. This removes it and replaces it with a function that generates a custom one. 
It will generate the token when you first set up the website and then use that token every time thereafter.
The token will be stored in .secret. If you need to move the website make sure you move that over as well so existing session variables for users don't break. 

.secret is in the .gitignore so it doesn't end up in the github repo.