took out hardcoded username and password