take credentials as a cmd line arg rather than hard-coded