moved creds into config file so not stored in cron