ignore config.yaml in git so it will never be accidently pushed
typo, add is_secure to config