moving username and password to config

also, only sending notification IF old packages are not delivered