fixed use of merchant id, username and password