@@ -0,0 +1,5 @@
+# A secret token used to encrypt user_id's in the Bookmarks#export callback URL
+# functionality, for example in Refworks export of Bookmarks. In Rails 4, Blacklight
+# will use the application's secret key base instead.
+#
+# Blacklight.secret_key = '<%= SecureRandom.hex(64) %>'
Should the app only generate this if it's being generated under Rails3? Or is that confusing, since sometimes people don't generate under what they plan to run under?