fix credential lookup