move username&password to properties