add secrets to .gitignore