use encrypted pwd for CNU and authenticat