credential changes to use basic auth