removing useless index.js; unsecuring repo_token since I don't think that's necessary?