moved secret_token / secret_key_base to secrets.yml
added comments to secrets.yml
moved Devise secret tokens to secrets.yml