credential_callable priority in validateIdentity() method

credential_callable should be considered first, falling back to credential_property if callable is not defined