Now optional whether or not credentials should be base64_decoded