content script for user/pass