removed need for hardcoded credentials