Making the API private

putting the key into MySecretAPIKey.h header file and then placing that
file as part of the .gitignore list, so it won’t get checked in again.