Update default.html

- moved getting credentials to the last step