-authorization works with Plain passwords