security patch, dynamically generate secret token

config/initializers/secret_token.rb update to randomly generate secret token
for each instance of the app
add .secret to .gitignore

This is per railstutorial.org ch. 3, but was also a depreciation warning when I would locally run this app.