privatized user/password info