Auth: Get password from form only once

Before, the user's password was retrieved for every authentication
backend tried for authentication.