Change devise token to use secrets.yml, add .ruby-version

* Remove secrets.yml from .gitignore, since it contains no
  keys that will be used in production

* Add .ruby-version while we're at it so CI runs the correct ruby

* Change config.secret_key in devise config to use the
  base_secret_key from Rails