dont forget to define user_cred