Also UrlDecode username if not password are used