Fix then param, login failure reason rendering
Add password authenticator that calls out to external basic auth-protected endpoint