add: verify guest credentials workflow