configurable callback url and credentials