handling with user/admin credentials, or missing/wrong credentials