load api key from environment variables

Instead of from code where everyone can see it.
remove node_modules
remove local.js from git

meant to be ignored and overridden locally
remove all node_modules from git
remove duplicate .idea entry
Update readme
Merge pull request #1 from iPlantCollaborativeOpenSource/jchansen/securify

jchansen/securify