add docs for allow_password_credentials