set credentials to false