move SQL credentials into variables