let's not allow null username & password for testing