remove hardcoded db (dev) pass