remove token from app/controllers/application_controller.rb