Phase 1 - With non-encrypted password: AJAX part