move user and password to params file