disuse user credentials