Convert secret_token to an ENV with a default

[flynfish]

Also add a comment in README about setting it so users are aware they need to add it as an ENV

File: config/deploy/initializers/secret_token.rb