Add .gitignore to ignore DotEnv files.
Don't show the login page if you're already logged in.
Use PATH_INFO instead of REQUEST_PATH for detecting request paths

* For stripping cookies off API calls