remove unused secret_token.rb initializer

This stopped being necessary in rails 4.1 — secrets.yml (which already exists) would/should be used instead.   

(in a public-facing app this secures cookies/sessions, so I got an email about this as a security leak, but currently we don't have that implemented in the first place.)