Move devise monkey patch into lib
Remove secret_token.rb initializer as it's deprecated

This was left over from the upgrade to Rails 4.1.x. It looks like Rails now
takes the secret token from secrets directly