Update constants.php

removed secret and pwd