(The client lib will only use it as a fallback.) Removed the useless username. It seems like there are other ways that the user/pass can be gotten from the user and/or stored. Also cleaned up some method access specs.