Devise still seems to need devise_secret_token.rb...[skip ci]