username is a substring of password, apparently.