[upd] UserCredentials instead username and password