yet another security fix
changed credentials to cred