update credentials