move http credentials block