fix user/pass to reset all on failure (*don't* leave failed anonymous