Why will my API credentials not verify?