made username and password of BasicAuthCredentials private