fixed credentials to never show up in the flow

removed credentials from the defaults section in pusher.html, added
oneditprepare to read them back from credentials.json when edited