fixes #6 - one set of credentials per user for now