credentials now read from a properties file