Update web.js

removed visible creds