avoid potential issues with 'withCredentials' in tests