auto generate secret key instead of hardcoding it

as recommended by hartl e application is shared as a public repository,
it’s important to update the so-called secret token used by Rails to
encrypt session variables so that it is dynamically generated rather
than hard-coded