remove api_username and password from resource