adding credentials to url