middleware
readme goodness
fixes case when no credentials are returned