I suggest to use FILTERED_USERNAME and FILTERED_PASSWORD instead of username and password.
And when somebody see it in logs, it's obvious that this words was if filtered.