implement better username/password handling