Should we just use `username` and `password` instead of abbreviating?