removed default username and password from javascript.
please use url http://user:pwd@localhost:28332 instead