Not a good idea to put credentials in JSON file...

Noticed it before it went to live, though.