removed hard coded user name and password