Grocery List: Make username/password substitution an explicit step

Fixes #13