Allow multiple expected log substrings in credentials test

Safety check that the fetch (which requires permissions) did not hang
and was not killed by a timeout.
Use equals() rather than == to compare string in test