forgot to urlencode username and password