remove secret token and include it in .gitignore