actually add credentials to returned array