add config.json to .gitignore to avoid exposing github password