rails / 5.0 / activerecord / securetoken