add private.yml, move secret token, add google analytics