set the secret_token using an environment variable - more suitable for heroku
heroku setup: unicorn, Procfile, rails_12factor gem, ruby version in Gemfile