Web API based credentials manager