you need to have separate text widgets for the username and password...otherwise you're dealing with one large text widget which, by default, let's people move around it freely (typing over stuff as they go), thus you lose control of their actions. in this way, you have no hope of extracting username/password.
nice colors :)