gitignore fixed to actually ignore secrets