moved cargo credentials to settings.xml