grab username & use password