Allow credentials too