implement username/password auth (WIP)