testing .gitignore to keep passwords secret