fixed app.js, added secret.json