never hardcode stuff like passwords :)