[sr-dev] git:master: modules/auth: mark credentials after verifying realm, not only after authentication succeeded