username and password authentication is done