update .gitignore for security