moved devise secret key to application.yml