remove credentials from repo