Shift username/password knowing responsibility from HSFClient to credential knowing responsibility to HSFAction subclasses