playing with credentials