Incompatible API change needs version bump. Can we move the new parameter to be the last one and make it optional?

public function loginUser($username, $password, $rememberme=0, $return=null, $secretkey=null) ...