retrofit VerifyCredentials