Fix: Credentials not removed from base_url when using 'session'
authmethod