Working on 'password' auth ...