show spinner while checking credentials