empty strings are not valid credentials