fixed Glass credentials to limit potental abuse (And since I invalidated the last batch); refactored send_to_glass and broke out refresh_creds.py