send credentials from extension to app