removing hard coded password/hash, not completed yet