add secrets, remove from gitignore