MDL-0029 check_password and retrieve token