clean out credentials