http refresh now working
ignore secret file
keep door open longer