Refactor credentials_url_root to reference CREDENTIALS_DOMAIN (since the
former just adds a protocol and port) and change it to a lowercase var
to convey that it shouldn't be overridden.