making the secret token actually secret. as per http://ruby.railstutorial.org/chapters/static-pages?version=4.0#top