renames updateCredentials() to setCredentials()
removes minimum password credential criteria (besides non-empty passwords) and removes credential validation from authenticate()