validate credentials in getCredentials + basic auth if it fails