added .gitignore
backported security fix, hardcoded version #