add config/initializers/secret_token.rb so I can push to heroku