README; devise secret_token
Kick out turbolinks
Force SSL
Secret token setting
Cookie key for session store
Fix locale files
Tweak default CSS