Update app.js

move keys to config file