this is soap credentials stuff