access credentials via database