set config secret in devise.rb