Removing secret_token from settings.yml.
This is getting overwritten in settings.local.yml. We are starting to default this to blank so that no one forgets to do this in the future.