updated app.json to use ADMIN_PASSWORD