using compiled assets
hide devise secret_key in production mode