Now do not check auth method of user anymore.
Assume password parameter is plain text base64 encoded