moved credentials to outer file