use variable instead of fixed password