using unencrypted username and password --- remember to change these asap