avoid exposing smtp password in test email