Using credentials in params