Fixed issue with new credentials not propogating correctly

Just changes the if statement to an if/else to allow the session to be overwritten in case new credentials are returned from the validate function. If no credentials are present flow continues as normal