add config/secrets.yml to gitignore