removed auth credentials from php - obviously just a tmp hack and a bad idea for future use