improve how Rails' secret_token is handled