removed user,pass in request