update gitignore to keep secret_token from public GitHub repos