load creds from config