password and username vars