credentials.js on .gitignore