this paragraph is incorrect and confusing since `:username` and `:password` are required hash keys