Use params-provided username and password if available

Prefer os.environ or explicitly-constructed values over params
for backwards-compatibility.
Merge pull request #11 from jdunck/params-auth

Use params-provided username and password if available