replace admin:test with real user credentials