partial end-to-end support - username, password still need to pass through