fix username and password defaults

defaults didn't work anymore after switching to vars. Now use the same
values also for upgrade to be able to share previously installed openqa
images.

also allow to override username in password just in case.