check if local credentials are still valid on first load