You will never see credentials when debugging. But they will be correctly transferred to where they are needed. And when using anonymous authentication, the client will not send the authentication header that will be used. You need to disable anonymous authentication.
source
share