fix(cradentials): set token header after start

Closes #12