move credential validation to UserProvider
Merge remote-tracking branch 'upstream/master'
Merge pull request #527 from patriot1burke/master

move credential validation to UserProvider