default username/pass from config