remove creds from webapp link