change git ignore and add security salt in core.php