You are leaking your tokens in credentials.py

[Double-A-92]

Don't commit the real config file, instead just commit a dummy file.
E.g. "credentials.py.here" and add credentials.py to the gitignore.