cleanup specs, move credentials to separate file