login: option to allow reusing the users password for backend auth