Move pasword constant to app server