Ignore temp files
Ignore generated cookie-signing token
Generate secure token instead of storing publicly