Correct pulling of credentials from auth hash