Plug test leaks
HTTP: use creds in url if available