fixed credentials session