add testing for credentials