start of user credentials