enable credentials
fix urlRoot
0.2.4