custom username and password rewrites all upstream authentication and submits to that user