deprecated the username/password method because it's a screwy cookie-based system that makes things more complicated than necessary