added "username" to filtered credentials