browser: add credential dialog (fixes #6044)