added CredentialsService and implementation so users can be manipulated