Update app.js

took out auth keys