Secret token needs to stay secret

(Stupid rails defaults :trollface:)
Merge branch 'keep-secret-token-secret'