default session credentials to nil