Placing band-aid over security hole

Storing password in environment variable instead of hardcoded.

To set environment variables on heroku, use `heroku config:set ENGPORT_PASS='password'`

Making the password not the same as the one that has been publicly available for several months would probably be a good idea.