add credentials_in_request_body option