fixed up querying syntax of user/password