add username/password kwargs in build_url()