Shouldn't this be set in `.env` and used as `ENV['DEVISE_SECRET_KEY']` here?