update credentials endpoint