prevent verifyCredentials from login out