Update .gitignore

keep secret key out of commits