I believe `if not http.credentials` should do the trick.