remove credentials from readme