hiding userid and password in url pointing to a published report on BI Server

We can access any static report(.prpt) published on BI Server using the URL from other application.
e.g.
http://localhost:8081/pentaho/conten...sword=password

But the url contains user id and password, which is not safe. Is there any way to access report from other application using URL but hiding the user id and password. (Any option other than SSO)