trying to get credentialed request to work