added credentials endpoint