fixed a security hole in /credits give
added a message relating to attempted thievery