removed credential TODOs

:-)
sry