improve packages.json for heroku
username/password by env