asserting that username / password are not null or empty