Don't save username & password and use session tokens instead.