fixed so username and password aren't hardcoded.