Updated loginUser:andPassword comment: user is user_id or user localpart