warning about username and password cred use