move timeout msg to ding_user_get_creds. Check path to catch AJAX calls