Return a response object with home doc, for consistency
Don't require uname/pword twice for creds api
Rebuild