with default authenticator. doesn't set credentials in webview