added logic to control creation of SST users
removed hardcoded sst credentials