Stackato 3 no longer has libxslt pre-installed in the default stack

Also add the definition of the SECRET_TOKEN to a pre-running hook, as
the app won't run if this isn't defined somewhere.

Ref http://bugs.activestate.com/show_bug.cgi?id=102119