D'ont allow username to be equal to password