fixed API credentials notice