That's authentication/authorization info; it should/must be stored on the client.