allow setting of user/password to authorize (other than using 'code').