we shouldn't have the actual users/passwords in u public git repo