try to fix credential issue, terrible security still...