new approach to passing credentials to app