move checked-in credentials to example file
add credentials.php to gitignore