Issue #5: Adding option to disable credentials
Issue #4: Adding (experimental) DNS rebinding protection