remove username/password from file for cross-user use