Can now properly authenticate with a password, but still work to do with a token and need to secure the password