add notice about secret files
Merge pull request #885 from acrogenesis/patch-1

missing security_token.rb inhibits development