read credentials from config file