hardcoded credentials