moved API credentials to an external, .gitignored config file