added app.sh for prompting credentials before starting app.js