extract credentials