Your arguments make sense. You could maybe rename the input parameter as ```transformedCredential``` for the ```authenticateUsernamePasswordInternal``` method for a better undersdanding...