only deploy from master, round 2

hopefully without exposing secrets this time.
Merge pull request #6 from edmontongo/deploy2

only deploy from master, round 2