Use secrets.yml and .env instead of secret_token.rb
Put .env back in repo for sharing non-secret development settings.