Cake3: basic auth system

* Check userid, passwd, valid fields
* Check loginPolicy
* Check group backend_auth