Update app.js

Removed Credentials.