moved credentials creation into user manager