GOP canvassing app credentials exposed in code repository