user credentials are now stored by id rather than username in oauth