use credentials in all http requests, credentials check, pull to refresh, progress spinner