Better stack trace in parsing credential.post errors
the application.call method now inherits the 'user whitelist api call' from UserApiCalls global variable defined in the usertoken-api-call module