move connection initialization into the client
this should use the host we're connecting to
allow setting the user's hostname too

eventually we should default this to something more sensible than
"localhost"
send the pass too if set
no reason for these extra & here