Add auth header when specifying credentials via target url param

Somehow originally added this to the wrong branch