Put API key and secret into separate file

Combine with JS file at build time