title: Is there any difference if I pass a user credentials as a payload, in the header, a parameter, or a query?
body: <p>I am making an API for my app and I want to know if there is any difference security wise whether I pass a user's credentials as a payload, in the header, as a parameter, or as a query? Besides security, are there any differences at all such as performance, is one faster that the other?</p>
  
  <p>This is for authenticating a user via username and password, from the client to the server in a GET request.</p>