credential check