make user and password optional (fix #12)