remove hardcoded username