get rid of kludgy jsonkey method and replace with regular object deserialization
simplify CredentialStore so it only has to manage json serialization