add ./
use https url so we can push
add encrypted access token