moved creds into own file, etc