only use cached credentials if they havn't expired