Element omission is opposite to element duplication. In both cases, you are trying to cause the service to reveal sensitive information with unexpected requests.
To create a request of this type, omit some elements from the body:
The response reveals an element you need to gain access to the service.
<error>element password is expected.</error>
Also, try the following:
Replace the username with a password:
Remove all elements: