added password auth (SSO does not allow authorizing yet)