added credential header