Escape Erb in secrets.yml

Fixes issue where `secret_key_base` in `config/secrets.yml` was blank,
missing `<%= ENV['SECRET_KEY_BASE'] %>`.

Fixes #340