Use OAuth instead of hardcoded username/password.