fix: path to authentication credentials when using remote url