update credentials from validated user