add passphrase into app.js