remove hardcoded mysql pass