reworked credentials