update app.js, change.php and login.php