moved consumer credentials to global conf