Allow use of username & password in query string