remove hard-coded credentials

[chistopher]

read up on some encryption stuff and store the username, password encrypted with salt in the database;
maybe just store the hash of the credentials (not invertable hash)