add npm-debug to ignore and fix ajax setup after auth