* no need to provide password / DB index when user uses URI * can provide timeout when user users URI