identifies bad credentials situation