default user/pass to nil in Credentials to source from environment