validation for creds