added variable to prompt

stupidly allowed for username and password to authenticate. Fixed