add dynamic secret_token & better .gitignore