move the application secret token to .secret; generate it with "rake secret >.secret"