update gitignore
bcrypt in production