add credential refresh