added credential storage SPI
add parameters for credential metadata, combine credential handlers for file and jpa identity stores