added mech_list: PLAIN LOGIN to disable others