adds secret_token.rb and configured some stuff in routes