first commit - basic project, password extracted (could be done more tidily)