remove secret token from public Git repo