ignore vendor folder
remove credentials from app