Fix HttpCredentials::invalidateToken to invalidate the password in the config file