keep rails secret token out of git