reading credentials from a xml