Credentials - FIX #247

* No more invalid Authorization headers (still need to cater for 401)
* Control the response before sending to filter_untriaged
* Adding a User Agent
* Fixing typos and syntax here and there
Thanks for this -- a User-Agent is actually required by the API. Not enforced, but required.