Don't allow null credentials

We don't need to hit the UMS for null or empty credentials.