database.yml and remove secret token from repo