Bugfix: passing in username as password