added credentials to the api call