optionally support credentials