NPM: prepare for ignore
NPM: use env vars for config to keep auth out of git