add secret_token to .gitignore