switch over to external credentials