hardcode the app credentials