I think username is understood in the common context of a password credential, but I suppose it doesn't hurt to emphasize it. While I prefer brevity in this case, I can live with either one.