client: save user credentials to hidden directory in home folder