Progress on authentication SPI. Both 'model' and 'externalModel' works including password update