This will reuse the same httpclient if the options differ only by user/password/token. Is that intentional? What if the previously returned httpclient is still used somewhere?