move devise secret key into application.yml