added credentials controller