remove hardcoded password