test for username/password outside a uri
I'm not testing that here
expose some internals to actually test
explanation