added new authentication mechanism with username/password login