Removed secret_token.rb

This wasn’t used since the switch to Rails 4,
but it looks bad if someone is concerned about
security.

Also: The app is Rails 4, so I updated the readme
to say so