Should `DEVISE_SECRET_TOKEN` == `APP_SECRET_TOKEN`?  If so, maybe you can drop `DEVISE_SECRET_TOKEN` here and instead edit the devise initializer in config/initializers to have

    config.secret_key = ENV['APP_SECRET_TOKEN']

and in `.travis.yml`, add a section called `env`:

    env:
      - APP_SECRET_TOKEN=faketokenfortravisonly