adds some README.md and ignore for auth token