use credentials object