Handle Secrets With Environment Variables

Enables deploying directly from the public repo securely, so long as you
specify the RAILS_SECRET_TOKEN environment variable on the target app
servers.

The development and test secret tokens are obviously garbage, but will
do for local testing.