username and password as parameters