Update server.js

took out pw