figure out how to store user credential