This avoids exposing credentials in URL for users with javasrcipt disabled in the browser.
Closes DEICH-6315