This change is a little concerning.  The previous API made it very clear that you were receiving only part of the Credentials object (the username and password).  This new version makes it look like you'll get the original Credential object which is not true.