http: use newer curl options for setting credentials