clean up routes.rb file and add secret_token initializer to .gitignore