moved password stuff to external file