add script/env.sh to gitignore
update README for website
put secret token in environment variable