[services/federation] use IOLoop auth, add PLAIN security