moved credentials to app.config

this required adding a reference to System.Configuration and "using
System.Configuration;"