support for stateless credentials