moving credentials to config.yaml