Credentials are stored in an encrypted session cookie only.
They are never logged or retained on our server.