move db username & password to settings