/v1/user/login API,  /v1/user/password API, done