remove credentials from code