login: inline `get_verified_credential()` as method

to make int overwritable in subclasses