hardcode credentials