removed note about user and password