fix specs for new withCredentials.