fixed credentials refresh