Moved repo credentials to url

Since the repo now serves public (without credentials), the plugin doesn't
use them so this is a workaround for now to force the user/password.