credentials processing requires json