added user credentials to request