added note about username and password in live session