config file for creds