http: fix typo in credentials logic

We want to check whether the credentials callback is NULL, not whether
the payload is.