fix(cradentials): set token header after start 

Closes #12