HttpClient does not extract Basic Auth credentials from URLs with
embedded user:pass@host format. Parse the access URL, build the
Authorization header explicitly, and strip credentials from the
request URI. Also send Content-Length: 0 on token exchange POST
and update setup instructions to point to beta-bridge.simplefin.org.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Catherine Renelle
1db0101b5a