I like to explicitly include the user_name and password so when reading this you know how existing_user matches with what you're providing in the login parameters. That way if you ever update your Factory definition, this should still work.

It's personal preference though, so take it or leave it.