Added JIRA user and password to test but then realized that this carried through with site:deploy and once a user clicked on the link to JIRA, he was authenticated as me, the administrator and could destroy the instance for OnDemand JIRA of MusicRecital