#6 when the credential is wrong, we just ask again and replace the existing keychain item