API credentials in separate config file