only loadItems for valid credentials