remove hard-coded password (already changed)