this `AuthenticationProvider` says it knows how to authenticate ONLY `LoginPasswordToken`.