assuring credentials can't be checked in
fixing pointer to javascript
fixing link to css