introduce DEVISE_SECRET_KEY env var in production