invalid check on credentials