removed hardcoded passwords