gets credentials