user/pass are required