#5321 Add missing return statement for bad credentials