added missing username and pw parameters for sessions