bug fix: removed the hard-coded username and password