#9 including creds in the return object