Install Rspec, make secret_token more secure
change README