TODO Current user/passwords are hard coded with write rights (to allow for easy playing around) before publish revoke those users and use netlify secretes