added credentials file and centralized auth