moved api keys, usernames, passwords to config files