Be sure to keep any actual username and passwords out of the code - either we can have a config file that is not part of VCS or read from env vars. Configuring here in a VCS managed files is going to lead to high likelyhood of accidental commit.