removed username and password from db