npm ignore credentials