add devise secret_token back