added method to hide username and password. changed some routes.