added username & pwd as attribute