add travis ci config & README bits

- ensure sensitive info is **not** in the config