Describe how username and password are stored