cleaning up and productionising the pass / creds