using the right credentials for update_vendors