This is why I always make config files for my projects that contain usernames and passwords, add that config to the .gitignore and then create a sample_config with the blank version. I learned to do this after one or two commits containing sensitive data. =)