Credentials constructor now creates default username/password as empty string