add secret_token to gitignore