move test credentials into settings.xml