require credentials
update schema
remove api hint
restructure routes
ignore credentials.js