addes username & pwd as attribute