remove HTTP user and password