middle of editing gref gid mistake, cleaned secrets
fixed app.js, login flow for new users