credentials as variables