catch missing credentials (#45)