start changing the application to use user based credentials