Merge pull request #950 from bbodenmiller/patch-1

ignore web deploy settings by default for security, but add a TODO comment