using user and pwd