removing hardcoded credentials