no credentials are stored on server side, only on browser storage.