set credentials in expected places