NPM: Verify credential upfront

Fixes gh-27