hiding secrets using ENV hash. Forcing SSL in production.
adding gitignore file