Fix: don't assume credentials post has mentions (fixes spec)