no need for password in sql statement