username & password removed from database.yml