modify secret_token.rb to dynamically generate secret code; add .gitignore