Don't we want it to throw if something other than a valid user/pass is given? It would be a failure somewhere else.