moved data models to separate file and added session secret
.gitignore is now working