create user & auth_token & list credits