add user on credential create
some security refactoring
place holder for registering tap resources