add gitignore and move oauth secrets to config

maybe you wanna reset those oauth secrets i think :)