Keeping username/password here adds a bit of flexibility to the app.  If wanted, you can still pass username/pass to init.  And also (not a likely use-case) if a client was managing multiple users, might want to send different auth credentials with each request without instantiating a new service.