use empty username and password as default
add check if username and password is correct