Restrict potential security holes in Auth validation library: limit credentials via an array and to only a single credential (besides password).