Remove hardcoded api credentials