Stupid question #47: how does a server get access to username and password?

[Mike Spreitzer]

I'm sorry, but I'm not finding it easy to rediscover this.  How can a 
service (e.g., a .jws) get access to the username and password?  I seem to 
recall something about adding a special argument to the method's 
signature.

Thanks,
Mike