The development and test environments now use a generic secret token.

Use the dotenv gem in production to set the secret token via the
SECRET_TOKEN environment variable.