remove username, password