For iOS: You can use a variable for the username/password on the data source. But you have to make sure that the variables are set before you load any views that use the data source.
If variables are used on the Data Source for the username and password but they have not yet been given values within your app, the app will send username and password parameters to the server with blank values.
For Android: Variables aren't currently supported.