fix Hard-coded credentials

[odaysec]

Including unencrypted hard-coded authentication credentials in source code is dangerous because the credentials may be easily discovered, the code may be open source, or it may be leaked or accidentally revealed, making the credentials visible to an attacker. This, in turn, might enable them to gain unauthorized access, or to obtain privileged information.

CWE-259. CWE-321. CWE-798.

✅ Checks

• [x] CI tests (if present) are passing
• [x] Adheres to code style for repo
• [x] Contributor License Agreement (CLA) completed if not a Reddit employee