set user/pass to None if login fails