Fix token handling for heroku
Remove lockdown on public pages
Bundle update