authentication info should not be in lock.json
authentication info should not be in lock.json