host user and password work now

hardcoded for now, but can make search server later