Keep user and password to null if authentication is not valid