Accept session ID as alternative to password.