add add a line to config / initializers / secret_token.rb