credential: parse URL without host as empty host, not unset