Use req.sspi instead of credentials

Fix syntax bug