WinHttp: use cred in url if provided