load secret token from environment in production
include gemset and ruby version
removed tmp/ and log/