moved filter_creds_by_caller() from auth.py to credential.py