getcredentials interface | TODO: make password input invisible
get_key returns access_token, which is either filled by auth constructor or login method