Every endpoint, one button each. The credential is held by the little server that serves this page, not by the page — which is where yours belongs too.
Pick a button.