removed username / password endpoints