updated route to verify credentials endpoint