partly implemented username/password