updated app.js to have the right credential for javascript client.