withCredentials only sync