API keys, .gitignore, and security

Session details coming soon.