app.js: update census review password

...this time without putting it in cleartext in the git repo :)

...but still hardcoding it in the controller action :(