remove username & passwd