update app.json with more BASIC_PASSWORD info