Right now you have to set a username and password. This is not a good practice and the usage of an auth token is the preferred way to check the quality gate status.