Don't allow username when no username flag set. Don't allow password when no password flag set. Closes #730. Closes #731. Thanks to Umberto Boscolo.