fix credentials.token