use the username parameter for the username, not the password parameter.