account credentials moved into config