feat: credentials page rewritten, uses wrdb token to readonly credentials from provisioning