app credentials api update