client.withCredentials