token attribute should accept false
Gemfile: some versions updated