added username/password authentication