remove credentials