Naive user/password login w.o. encryption