added username & password