get rid of hardcoded db credentials.