use config/initializers/secret_token.rb