grab credentials