handle encrypted password authentication