- remove user/password authentication
  - deprecated in support of api token