removed hardcoded user and password