"User credentials" is defined in section 2.2 of [1], but never used.Jonathan [1] http://www.w3.org/TR/2010/CR-XMLHttpRequest-20100803/
Unfortunate that nobody spotted that earlier. It should have been delimited by XMLHttpRequest Level 2 tags in the source document but wasn't. I fixed that now.
-- Anne van Kesteren http://annevankesteren.nl/
