don't need user/pass when using api. fix #142