user is routed to credentials mangement if no credentials exist