key validation plus that credentials decoding bug

re issue #187