Add info on including auth credentials in URL