add secret_token.rb with rake secret