moved CMS login details to localsettings