using stupid password for now (need to think about another way)