replace BaseCredentialsReceptor by RequiresHttpAction