Ignore config.json, add config.sample.json. Make sure no real authTokens are leaked into git