update credentials, fix fallback