get rid of credentials