the implementation checks if the credentials are VALID, no?