updated readme to include credential directions