handle empty lists as body.
convert User/Pwd as string if needed.