use osxkeychain for http credentials