ignore gemfile.lock and secrets - also force SSL