put in credentials outside of repository