Merge pull request #3 from mikey179/master

work for 3.0.0
api changes
prevent direct access to username and password
reverse change for applyCredentials(), too complicated; git better solution now with SecureString