fix: set user credentials in URL as Authorization header (#5884)

fix: set user credentials in URL as Authorization header (#5884) #4980