Switch to bearer token
Remove authorization info

That's not accessible without original user/pass.