check credential stuff