Add username and password as parameters to the WebserviceWorkItemHandler.  By declaring the username/password directly in th kie-deployment-descriptor.xml, currently no way to change it when promoting artifacts(kjar) from one environment to the other.