add web app folder
update gitignore to exclude db credentials info