ignore secret.json
remove npmignore - should use gitignore
update README