added hidden credentials