Now this

config/initializers/devise.rb

@@ -5,10 +5,10 @@ Devise.setup do |config|
   # random tokens. Changing this key will render invalid all existing
   # confirmation, reset password and unlock tokens in the database.
   if Rails.env == 'production'
-  #   config.secret_key = ENV['devise_secret']
+    config.secret_key = ENV['devise_secret']
   # else
-    config.secret_key = '8724ed1027eb2d2686a425033671014691e16d86de126d5a39a21'\
-   '06b900392c309d5facd9c8c89740d5e0a50862941e0c2aa3794c4588bebfd2d7e10da1be670'
+   #  config.secret_key = '8724ed1027eb2d2686a425033671014691e16d86de126d5a39a21'\
+   # '06b900392c309d5facd9c8c89740d5e0a50862941e0c2aa3794c4588bebfd2d7e10da1be670'
   end
   # ==> Mailer Configuration
   # Configure the e-mail address which will be shown in Devise::Mailer,

config/initializers/secret_token.rb

@@ -10,11 +10,11 @@
 # Make sure your secret_key_base is kept private
 # if you're sharing your code publicly.
 if Rails.env == 'production'
-#   Dss::Application.config.secret_key_base = ENV['secret_key_base']
+  Dss::Application.config.secret_key_base = ENV['secret_key_base']
 # else
   # Going to keep a hard coded one here to make life easy for folks who want to
   # run it in development / submit PRs. Less config. RC.
-  Dss::Application.config.secret_key_base = '452b4491c1cdd7315a0d787be2f7668ea'\
-  '8307a64733488151a43b62bdd76a6eb819cf973a9261b1500ef5745faf54171c7015f5ab7fd'\
-  '43449a5e06e6c1215e4e'
+  # Dss::Application.config.secret_key_base = '452b4491c1cdd7315a0d787be2f7668ea'\
+  # '8307a64733488151a43b62bdd76a6eb819cf973a9261b1500ef5745faf54171c7015f5ab7fd'\
+  # '43449a5e06e6c1215e4e'
 end