update to async CredentialProvider