modified .gitignore
set secure randomly generated secret token