Rename to 'server.js' to match standards.
Use some templating instead of having app id and secret in file.