make the getters for username and password also be private