credential: die() when parsing invalid urls