removed password from api/index.php