Revise SessionService to accept password  instead of params structure