moved credentials from class to xml