Why hard code user and password in index.js file?

[leibf2099]

line no 135 in index.js file: beforeSend: function(xhr) { xhr.setRequestHeader("Authorization", "Basic " + btoa("demo:demo")); }