add ability to pass api_username and api_password to the HWRP to be more secure. maintain backwards compatibility