client credential generation