not overwriting sources list on host system
removing accidentally checked in .orig's
adding google authenticator secret key to display tor urls