fixed lsq credential passing in urls