removes keychain from .gitignore, moves API keys to secret.js