security patch, dynamically generate secret token

config/initializers/secret_token.rb update to randomly generate secret token
for each instance of the app
add .secret to .gitignore