reorganize project into cli subfolder, hide password in the cli