Add client API keys to ignore file
Add user tokens to ignore file
Add OAuth2 token exchanger sever